Understanding Data Controller and Processor Registration in Nigeria
In Nigeria, various organisations process the personal data of citizens for numerous reasons, both within and outside the country. Ensuring the privacy and security of data subjects is crucial, and it's essential that only legitimate entities process data for legally recognized purposes. Legal Framework The Nigeria Data Protection Act, 2023, empowers the Nigeria Data Protection Commission (NDPC) under section 5(d) to designate certain data controllers and processors of major importance, who must register with the Commission. The NDPC's mandate includes considering entities with significant economic, societal, or security importance when designating these data controllers and processors. Who is a Data Controller/Data Processor in Nigeria? As per Section 65 of the NDPC Act, a data controller or processor of major importance is defined as an entity domiciled in, resident in, or operating in Nigeria that processes or intends to process the personal data of a prescribed number of da
